Thank you for your reply . Sorry , you mean the tcpdump can be used to monitor the exchanged packets toward an spesific ip address ? I thought that it can just monitor all of the packets on my eth0 and then I need to find the dedicated port to try to filter with . If it can do that , please provide me with an example on how to use it to monitor for an specific ip address ?